Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
File:                     747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa (raw, json)
Hash identifier:          qAzZMNBgh7HYuDwJON0zPbgx1nwY6ZSqDp9C9s6jaF8=
Subject key identifier:   76:D3:55:F2:94:EE:18:C5:7D:98:26:AF:74:E3:36:2D:2C:95:4F:66
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584D6515166081FEAB8B69846AA0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14297
IP address blocks:        139.131.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:16:60:81:fe:ab:8b:69:84:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=96dff244-bdbc-4b99-a09c-a36a8beb2b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:b9:ae:37:41:88:d2:64:a6:b1:a4:ae:51:
                    aa:d3:8a:82:60:0b:f4:88:b2:df:c0:3c:40:f7:63:
                    35:b0:c5:20:0d:c2:f9:ea:b6:60:5f:c4:41:17:6c:
                    8d:f6:8f:32:38:08:ea:9f:a6:19:b1:81:de:c4:c0:
                    55:0a:72:d1:f4:e6:21:6e:1e:7b:46:a8:19:c9:86:
                    87:ce:89:15:b2:28:0e:6c:7b:81:65:9a:20:81:d2:
                    28:a8:3d:26:0f:7d:cd:89:e2:52:2d:76:e8:eb:66:
                    56:7b:e2:ce:ca:7c:5a:73:d6:4e:80:6d:5e:84:1a:
                    48:ef:bc:83:7f:a5:8d:07:4e:89:a4:d1:d0:e4:a1:
                    23:41:59:f1:26:63:c9:db:ea:51:a8:78:f0:99:bc:
                    8b:1b:46:8a:8b:7e:0a:97:b2:42:b3:b1:fb:03:99:
                    e9:9c:1a:09:e2:f4:2e:4a:40:69:f8:40:37:93:06:
                    6e:99:14:b8:83:1c:f9:34:68:7c:e8:aa:66:62:75:
                    c4:9a:01:6f:0a:89:b8:fb:c7:e7:59:5d:89:dd:ca:
                    8b:5b:50:d3:f4:2c:81:83:6a:e6:36:b2:3f:64:a2:
                    ca:87:a7:e0:a9:2c:0b:3e:57:cf:2b:bf:41:8d:6b:
                    1a:21:df:49:16:34:64:6c:c9:90:fc:8a:b9:c9:e0:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:55:F2:94:EE:18:C5:7D:98:26:AF:74:E3:36:2D:2C:95:4F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/747a421b-d7bd-378e-ae76-a1fb0a819ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:aa:d2:04:80:2e:12:07:b2:a2:39:26:dd:ed:90:34:8b:d5:
         03:19:10:23:04:44:ea:18:b9:0e:00:1b:ad:cc:e3:be:c2:20:
         a9:bb:18:26:5c:a5:f2:c9:fd:b3:6c:a0:b9:ae:fa:26:25:15:
         87:66:99:3c:de:c6:16:c4:6c:04:81:7b:1b:ac:b7:4e:7e:eb:
         b9:ae:0f:99:6c:32:58:30:52:52:f5:8f:41:3f:06:0d:0b:22:
         c3:b6:cb:ba:e7:40:b9:61:5e:c2:d9:a7:bf:15:b2:75:63:fd:
         3a:a3:1d:ec:ca:44:fc:fc:04:52:d4:6e:f3:c5:c3:9d:fb:89:
         06:e0:9a:c3:02:19:b8:6f:59:a3:b4:bb:dd:2e:3e:c1:3c:5f:
         da:b3:dc:25:e4:59:07:f8:d1:a7:61:89:2c:36:3e:f3:fd:25:
         c0:d5:6d:9f:cd:23:52:41:ad:14:bd:e0:3e:f7:fb:5f:4f:72:
         ec:78:d4:63:b1:54:a0:c5:77:04:02:23:72:d9:46:a8:b0:aa:
         b4:ad:e0:01:43:50:22:20:83:e4:88:23:30:8d:0f:7c:dc:d5:
         fb:5a:e5:fa:54:ea:85:38:17:4d:e7:d1:f1:8e:ad:db:8b:ae:
         b1:5a:d3:d8:73:bf:05:35:55:66:86:5c:13:21:82:ec:46:89:
         db:86:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:08:22 2026 by rpki-client